NIST SP 800-88 Rev 2
Sections 1 and 2: purpose, scope, audience, media types, the target of sanitization and decision factors – NIST SP 800-88 Rev 2

NIST SP 800-88 Rev 2 2.3: Target of sanitization: all user data when sensitive data cannot be selectively removed, and the full physical capacity including overprovisioned and compressed areas

What does 2.3 require?

Sanitization eliminates either the sensitive information on media or the media itself. For hard copy the whole medium is eliminated. For ISM the sensitive data may be part or all of what the user stored; when selective or partial removal of the target data is not possible, the whole of the user data becomes the target. Because some ISM hold more physical storage than the user-addressable capacity (overprovisioning) or more addressable capacity than physical (internal compression), user data may reside across the entire physical capacity, and the whole of it is sanitized.

Maintained by Gerard Blokdyk

Other controls in Sections 1 and 2: purpose, scope, audience, media types, the target of sanitization and decision factors – NIST SP 800-88 Rev 2

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-88 Rev 2 controls